1

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that malware will find its way in live usb and hence infect the re-install ? If yes, how to get rid of it ?

1

It is definitely not safe. You cannot trust any drive that has been written from an infected machine.

There is no way to ensure the integrity of the live USB.

  • Technically, you could compare hash values to determine if anything 'extra' was injected to the live USB. – Matthew Peters Aug 6 '14 at 20:14
  • @MatthewPeters actually, with the new "BADUSB" exploit, not even that is safe anymore, although I doubt anyone has implemented it yet, it won't stay that way for long – user2813274 Aug 6 '14 at 20:34
  • @user2813274, the findings for that exploit are preliminary. Regardless, unless you have exploited the hashing algorithms or hashing program or GUI that reads the hash I suppose, you can still compare two hashes... and yes, you can hash firmware as well. – Matthew Peters Aug 6 '14 at 20:41
  • @MatthewPeters the only problem with asking a firmware it's code for hashing.. is that it can lie – user2813274 Aug 6 '14 at 20:44
  • 1
    @user2813274, you're missing the point of hashing (that is you are not executing code but merely reading it's value bit by bit). Also here is some good info on debunking the horrors of badusb – Matthew Peters Aug 6 '14 at 21:12
1

It is technically possible for malware to infect your live USB if you create that live usb from the infected pc.

Personally, I would never consider doing what you are asking to restore a system because you can never be sure you've gotten rid of all malware. However, you can attempt to create the live usb and restore your pc and once restored, simply compare the hash values of the live usb with a trusted source to see if there was any malware transferred over.

Now, the above method is still vulnerable in several ways. Namely, that some malware can hide deeper than the OS level and thus evade a clean reinstall.

Also, note that malware could transfer itself to the usb drive itself (firmware or otherwise not within the legitimate files) and it could be difficult to determine that.

Personally, I would find a trusted pc to create my backup disk. If I am paranoid (which I am), I'd sell the pc on Craigslist and get a new one.

If you have no other source (no friends or job) and do not use your pc for sensitive work (IE designing nuclear missile warheads) and only want to use your pc for gaming and/or porn, then simply creating a live usb and restoring will most likely do the trick.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.